Golang Stealthworker

go vuln scanner malware that's dropped on the servers of infected WP, scanning for vuln plugins wp-customer-reviews + more

SHA1:9f4674aa162f72492f80fe369f60a68701d33f7b
fttt[.]developerstatss[.]ga/beras (dead)
C2: 95. 142. 46 .69@CyberSecurityN8 @MalwarePatrol#malware #go pic.twitter.com/EbECaxviU8

— Luke Leal (@rootprivilege) September 2, 2020